Indicators of Compromise

The Hacker News 📡 RSS Aug 19

Hackers Compromised 14,500+ Dahua Devices Using Credential Attacks, Auth Bypasses, and P2P

Domains: hunt.io

The Hacker News →

The Hacker News 📡 RSS Aug 19

Critical macOS, SharePoint, vCenter, and Microsoft IKE Flaws Under Active Exploitation

CVEs: CVE-2026-65400

The Hacker News →

GBHackers 📡 RSS Aug 19

Cursor 0-Day Lets Attackers Execute Malicious Code by Opening a Repository

CVEs: CVE-2026-63093

GBHackers →

GBHackers 📡 RSS Aug 19

BeyondTrust Endpoint Privilege Management Flaws Enable Local Privilege Escalation

CVEs: CVE-2026-40144 CVE-2026-40145

GBHackers →

GBHackers 📡 RSS Aug 19

Critical Apache HttpComponents Client Flaw Lets Attackers Impersonate Servers

CVEs: CVE-2026-71290

GBHackers →

Security Affairs 📡 RSS Aug 19

U.S. CISA adds Apple macOS, Microsoft SharePoint, Broadcom VMware vCenter, and Microsoft IKE flaws to its Known Exploited Vulnerabilities catalog

CVEs: CVE-2026-33824

Security Affairs →

GBHackers 📡 RSS Aug 19

CISA Warns Hackers Are Actively Exploiting VMware vCenter Path Traversal Flaw

CVEs: CVE-2026-59310

GBHackers →

GBHackers 📡 RSS Aug 19

Cl0p Hackers Exploit PTC Windchill Vulnerability to Deploy Custom Web Shell and Steal Data

CVEs: CVE-2026-12569

GBHackers →

GBHackers 📡 RSS Aug 19

Critical Microsoft Copilot CoSnitch Flaw Lets Hackers Steal Sensitive Data With One Click

CVEs: CVE-2026-24301

GBHackers →

SANS ISC 📡 RSS Aug 19

ISC Stormcast For Wednesday, August 19th, 2026 https://isc.sans.edu/podcastdetail/10058, (Wed, Aug 19th)

SANS ISC →

CSO Online 📡 RSS Aug 18

Critical GitLab flaw allows attackers to delete and modify public repos

CVEs: CVE-2026-19478

CSO Online →

Qualys Blog 📡 RSS Aug 18

CVE-2026-68820 is in KEV. Here Is What CISA BOD 26-04 Actually Requires Now

CVEs: CVE-2026-68820

Qualys Blog →

GBHackers 📡 RSS Aug 18

Critical MLflow SSRF Flaw Exploited in the Wild

CVEs: CVE-2026-64849

GBHackers →

CISA Advisories 📡 RSS Aug 18

CISA Adds Four Known Exploited Vulnerabilities to Catalog

CVEs: CVE-2026-33824 CVE-2026-55040 CVE-2026-59310 CVE-2026-65400

CISA Advisories →

Help Net Security 📡 RSS Aug 18

Critical GitLab flaw allows attackers to modify or delete public projects (CVE-2026-19478)

CVEs: CVE-2026-19478

Help Net Security →

The Hacker News 📡 RSS Aug 18

One Attacker Has Scraped Both Salesforce and ServiceNow Portals Since 2025

IPs: 158.220.87.79

The Hacker News →

GBHackers 📡 RSS Aug 18

CISA Warns of Active Exploitation of Ray-Project Ray Code Injection Vulnerability

CVEs: CVE-2025-62593

GBHackers →

SecurityWeek 📡 RSS Aug 18

300,000 WordPress Sites Potentially Exposed to Hacking Due to Form Plugin Flaw

CVEs: CVE-2026-15748

SecurityWeek →

The Hacker News 📡 RSS Aug 18

SafePal Hardware Wallet Maker Says Flaw Exposed Data of Nearly 40,000 Customers

Domains: safepal.com

The Hacker News →

Security Affairs 📡 RSS Aug 18

GitLab Patches Critical Unauthenticated GraphQL Vulnerability

CVEs: CVE-2026-19478

Security Affairs →